Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-30837
7.5
HIGHCVSS v3
Published
May 8, 2023
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.
GitHub